CVE-2021-30472

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.

• CWE-119
• CWE-787

• https://bugzilla.redhat.com/show_bug.cgi?id=1947458Exploit, Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1947458Exploit, Issue Tracking, Patch, Third Party Advisory

Published

May 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30465runc before 1.0.0-rc95 allows a Container Filesystem Breakou…8.5
• CVE-2021-30468A vulnerability in the JsonMapObjectReaderWriter of Apache C…7.5
• CVE-2021-30469A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoF…5.5
• CVE-2021-3047A cryptographically weak pseudo-random number generator (PRN…3.1
• CVE-2021-30470A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive …5.5
• CVE-2021-30471A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive …5.5
• CVE-2021-30473aom_image.c in libaom in AOMedia before 2021-04-07 frees mem…9.8
• CVE-2021-30474aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30…9.8
• CVE-2021-30475aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24…9.8
• CVE-2021-30476HashiCorp Terraform’s Vault Provider (terraform-provider-vau…9.8
• CVE-2021-30477An issue was discovered in Zulip Server before 3.4. A bug in…4.3
• CVE-2021-30478An issue was discovered in Zulip Server before 3.4. A bug in…4.3